Threat-Driven Security Engineer: Pentest & CST

Amazon Inc.; Seattle (WA); Remote; USD 93,000 - 159,000; Full time

Job summary

Amazon Development Centre (London) Limited seeks a Security Engineer to join Continuous Security Testing (CST), the AWS team that thinks like an adversary about production systems. You will translate signals into tests, design detections, and collaborate with teams to push secure design.

We value creative investigative work, testing live AWS services, and building AI-assisted tooling to uncover novel attack paths. You will mentor peers and deliver clear, actionable results across the org.

Responsibilities

• Turn real world signals, threat intelligence, scanner output and past findings into testable hypotheses about how an adversary might think about systems in production
• Test live AWS services and internal systems, combining penetration testing with AI-augmented source code review, and direct the tooling at trust boundaries and attack paths it would not reach on its own
• Bring creativity to every investigation: invent new techniques and research areas nobody has explored yet
• Investigate whether something novel you've uncovered could apply across other systems, then prove or rule out impact end to end with safe, reproducible proof-of-concept work
• Trace attack paths across chained components to show compound risk that stays invisible when each component is tested alone
• Take each finding to a resolution: work with service teams, SecOps and AppSec on the fix, validate it, and check the fix can't be bypassed
• Turn what you find into lasting defences, such as detections that run across the fleet, security canaries, fuzzers and documented methods, and track whether other teams adopt them
• Build and tune the harnesses that steer the team's AI testing tools, measuring where they miss attack patterns or produce false positives
• Test agentic AI systems as an adversary would, including tool use, memory, agent-to-agent communication and orchestration
• Write clear results that record what you tested, why, what you found or ruled out, and the risk that remains
• Peer review other engineers' scopes and findings, and mentor engineers and apprentices on the team

Job description

Amazon Development Centre (London) Limited seeks a Security Engineer to join Continuous Security Testing (CST), the AWS team that thinks like an adversary about production systems. You will translate signals into tests, design detections, and collaborate with teams to push secure design.

We value creative investigative work, testing live AWS services, and building AI-assisted tooling to uncover novel attack paths. You will mentor peers and deliver clear, actionable results across the org.